Information Consulting Services
Newark, Delaware
Cisco Meraki Network Administrator / Support Engineer Location: Dover or Newark, DE Hybrid, 12 Days Onsite per Week Employment Type: Contract Schedule: Full-Time 40 Hours per Week Industry: Open to All Industry Backgrounds Position Overview Our client is seeking a Cisco Meraki Network Administrator / Support Engineer to support a large, geographically distributed network environment consisting of approximately 60+ remote locations and more than 70 ISP-connected sites . This individual will primarily support the organization's Cisco Meraki environment , with responsibility for day-to-day network administration, troubleshooting, hardware refreshes, equipment configuration, ISP coordination, and remote-site deployments. The organization is currently undertaking a significant network hardware refresh initiative , replacing approximately 25% of its remote-site infrastructure each year as equipment reaches end of life on a four-year lifecycle . The selected consultant will play a key role in coordinating these refreshes from equipment staging and configuration through installation and final validation. This is an excellent opportunity for a strong Level 1 Network Engineer/Administrator who is ready to grow into a Level 2 capacity . The role does not require advanced core-network architecture experience but does require hands-on Meraki knowledge, strong troubleshooting skills, and excellent communication and coordination abilities. Key Responsibilities Cisco Meraki Network Administration & Support Support and administer Cisco Meraki network infrastructure across approximately 60+ remote business locations . Configure, monitor, maintain, and troubleshoot Meraki switches, security appliances, wireless infrastructure, VPN connectivity, and WAN services. Utilize the Meraki Dashboard for network administration, monitoring, troubleshooting, and configuration. Provide day-to-day remote network support for geographically distributed locations. Troubleshoot connectivity, hardware, ISP, VPN, switching, and general network issues. Escalate more complex networking issues to senior Network Engineers when appropriate. Assist senior engineers with traditional Cisco infrastructure and other network initiatives as needed. Network Hardware Refresh & Site Deployments Support an ongoing multi-year network hardware refresh program , replacing equipment as it reaches end of life. Help coordinate the annual refresh of approximately 25% of remote locations as part of the organization's four-year hardware lifecycle. Receive, configure, and stage Meraki network equipment from the client's Delaware office prior to shipment to remote locations. Prepare equipment and configurations so installations can follow a standardized, repeatable deployment process. Coordinate hardware replacements and installations with individual business locations, internal resources, third-party vendors, and remote technicians. Work closely with the organization's third-party field services provider to schedule technicians and ensure equipment is successfully installed at each location. Provide technical direction and remote support during equipment swaps and site upgrades. Test and validate network connectivity following installations and upgrades. Track multiple site deployments, schedules, dependencies, outstanding issues, and completion status. ISP & Vendor Coordination Coordinate ISP services and connectivity across 70+ locations . Work directly with carriers on new circuit installations, circuit turn-ups, bandwidth upgrades, migrations, outages, escalations, and service disconnects. Coordinate activities between ISP providers, site personnel, third-party technicians, vendors, and internal IT resources . Serve as a primary point of communication during remote-site network implementations and troubleshooting activities. Ensure equipment, vendors, technicians, site contacts, and technical resources are aligned before scheduled installations. Follow through on open issues until connectivity or deployment activities are successfully completed. Documentation & Operational Support Maintain accurate documentation related to network hardware, configurations, circuits, site deployments, and upgrades. Document deployment status, technical issues, troubleshooting steps, and resolutions. Support standardized processes and procedures for repeatable remote-site network deployments. Collaborate with the broader Network Engineering team on ongoing infrastructure initiatives. Required Qualifications Hands-on experience supporting and administering Cisco Meraki network environments . Experience with Meraki switches, security appliances, wireless infrastructure, and/or the Meraki Dashboard . Working knowledge of TCP/IP, switching, routing, VLANs, firewalls, VPNs, WAN connectivity, and network troubleshooting . Experience configuring, staging, deploying, replacing, and troubleshooting network equipment. Experience supporting remote or branch-office network environments . Experience coordinating with ISPs, telecommunications carriers, third-party vendors, field technicians, and remote business locations . Ability to troubleshoot network connectivity and determine when issues should be escalated to senior engineering resources. Ability to coordinate multiple network installations, refreshes, and support activities simultaneously. Strong verbal communication skills and the ability to spend significant time communicating with remote sites, ISPs, vendors, and technicians. Strong organizational skills, attention to detail, and follow-through. Ability to work independently while collaborating with a broader Network Engineering team. Ability to work onsite in Dover or Newark, Delaware approximately 12 days per week . Preferred Qualifications Experience supporting networks across a large number of geographically distributed branch or remote locations. Experience participating in large-scale network hardware refresh or modernization initiatives . Experience coordinating ISP circuit installations, upgrades, outages, and carrier troubleshooting. Familiarity with traditional Cisco switching and routing technologies outside of Meraki. Exposure to Microsoft Azure networking or Meraki virtual appliances . Cisco CCNA, Cisco Certified Support Technician, Meraki training, or similar networking certifications. Previous experience in a Network Administrator, Network Support Engineer, NOC Analyst, Network Engineer I, or Junior Network Engineer position. Experience coordinating technical deployments involving multiple internal and external resources. Ideal Candidate Profile The ideal candidate is a hands-on Cisco Meraki professional with a strong Network Administrator or junior Network Engineer background who is equally comfortable troubleshooting technology and coordinating with people. This person does not need to be a senior network architect or advanced Cisco engineer. A strong Level 1 networking professional with solid Meraki experience and the ability to grow into Level 2 responsibilities could be an excellent fit. Because much of the environment follows standardized Meraki configurations, success in this role will depend heavily on organization, communication, troubleshooting ability, and follow-through . The individual should be comfortable spending significant time on the phone coordinating with remote locations, ISP providers, third-party technicians, and internal teams while ensuring network refreshes and connectivity issues are driven through completion.
Cisco Meraki Network Administrator / Support Engineer Location: Dover or Newark, DE Hybrid, 12 Days Onsite per Week Employment Type: Contract Schedule: Full-Time 40 Hours per Week Industry: Open to All Industry Backgrounds Position Overview Our client is seeking a Cisco Meraki Network Administrator / Support Engineer to support a large, geographically distributed network environment consisting of approximately 60+ remote locations and more than 70 ISP-connected sites . This individual will primarily support the organization's Cisco Meraki environment , with responsibility for day-to-day network administration, troubleshooting, hardware refreshes, equipment configuration, ISP coordination, and remote-site deployments. The organization is currently undertaking a significant network hardware refresh initiative , replacing approximately 25% of its remote-site infrastructure each year as equipment reaches end of life on a four-year lifecycle . The selected consultant will play a key role in coordinating these refreshes from equipment staging and configuration through installation and final validation. This is an excellent opportunity for a strong Level 1 Network Engineer/Administrator who is ready to grow into a Level 2 capacity . The role does not require advanced core-network architecture experience but does require hands-on Meraki knowledge, strong troubleshooting skills, and excellent communication and coordination abilities. Key Responsibilities Cisco Meraki Network Administration & Support Support and administer Cisco Meraki network infrastructure across approximately 60+ remote business locations . Configure, monitor, maintain, and troubleshoot Meraki switches, security appliances, wireless infrastructure, VPN connectivity, and WAN services. Utilize the Meraki Dashboard for network administration, monitoring, troubleshooting, and configuration. Provide day-to-day remote network support for geographically distributed locations. Troubleshoot connectivity, hardware, ISP, VPN, switching, and general network issues. Escalate more complex networking issues to senior Network Engineers when appropriate. Assist senior engineers with traditional Cisco infrastructure and other network initiatives as needed. Network Hardware Refresh & Site Deployments Support an ongoing multi-year network hardware refresh program , replacing equipment as it reaches end of life. Help coordinate the annual refresh of approximately 25% of remote locations as part of the organization's four-year hardware lifecycle. Receive, configure, and stage Meraki network equipment from the client's Delaware office prior to shipment to remote locations. Prepare equipment and configurations so installations can follow a standardized, repeatable deployment process. Coordinate hardware replacements and installations with individual business locations, internal resources, third-party vendors, and remote technicians. Work closely with the organization's third-party field services provider to schedule technicians and ensure equipment is successfully installed at each location. Provide technical direction and remote support during equipment swaps and site upgrades. Test and validate network connectivity following installations and upgrades. Track multiple site deployments, schedules, dependencies, outstanding issues, and completion status. ISP & Vendor Coordination Coordinate ISP services and connectivity across 70+ locations . Work directly with carriers on new circuit installations, circuit turn-ups, bandwidth upgrades, migrations, outages, escalations, and service disconnects. Coordinate activities between ISP providers, site personnel, third-party technicians, vendors, and internal IT resources . Serve as a primary point of communication during remote-site network implementations and troubleshooting activities. Ensure equipment, vendors, technicians, site contacts, and technical resources are aligned before scheduled installations. Follow through on open issues until connectivity or deployment activities are successfully completed. Documentation & Operational Support Maintain accurate documentation related to network hardware, configurations, circuits, site deployments, and upgrades. Document deployment status, technical issues, troubleshooting steps, and resolutions. Support standardized processes and procedures for repeatable remote-site network deployments. Collaborate with the broader Network Engineering team on ongoing infrastructure initiatives. Required Qualifications Hands-on experience supporting and administering Cisco Meraki network environments . Experience with Meraki switches, security appliances, wireless infrastructure, and/or the Meraki Dashboard . Working knowledge of TCP/IP, switching, routing, VLANs, firewalls, VPNs, WAN connectivity, and network troubleshooting . Experience configuring, staging, deploying, replacing, and troubleshooting network equipment. Experience supporting remote or branch-office network environments . Experience coordinating with ISPs, telecommunications carriers, third-party vendors, field technicians, and remote business locations . Ability to troubleshoot network connectivity and determine when issues should be escalated to senior engineering resources. Ability to coordinate multiple network installations, refreshes, and support activities simultaneously. Strong verbal communication skills and the ability to spend significant time communicating with remote sites, ISPs, vendors, and technicians. Strong organizational skills, attention to detail, and follow-through. Ability to work independently while collaborating with a broader Network Engineering team. Ability to work onsite in Dover or Newark, Delaware approximately 12 days per week . Preferred Qualifications Experience supporting networks across a large number of geographically distributed branch or remote locations. Experience participating in large-scale network hardware refresh or modernization initiatives . Experience coordinating ISP circuit installations, upgrades, outages, and carrier troubleshooting. Familiarity with traditional Cisco switching and routing technologies outside of Meraki. Exposure to Microsoft Azure networking or Meraki virtual appliances . Cisco CCNA, Cisco Certified Support Technician, Meraki training, or similar networking certifications. Previous experience in a Network Administrator, Network Support Engineer, NOC Analyst, Network Engineer I, or Junior Network Engineer position. Experience coordinating technical deployments involving multiple internal and external resources. Ideal Candidate Profile The ideal candidate is a hands-on Cisco Meraki professional with a strong Network Administrator or junior Network Engineer background who is equally comfortable troubleshooting technology and coordinating with people. This person does not need to be a senior network architect or advanced Cisco engineer. A strong Level 1 networking professional with solid Meraki experience and the ability to grow into Level 2 responsibilities could be an excellent fit. Because much of the environment follows standardized Meraki configurations, success in this role will depend heavily on organization, communication, troubleshooting ability, and follow-through . The individual should be comfortable spending significant time on the phone coordinating with remote locations, ISP providers, third-party technicians, and internal teams while ensuring network refreshes and connectivity issues are driven through completion.
INTEGRATED IT GROUP LLC
Twinsburg, Ohio
Job Description Job Description This role requires deep technical expertise in Microsoft 365/Azure combined with strong consulting skills to ensure our clients' infrastructure is secure, scalable, and fully optimized. The responsibilities include but are not limited to architecting and developing migration plans, creatively building solutions that are technically sound, performing engineering tasks for the delivery of solutions and migrations, developing documentation for the handoff to support, and serving as a point of escalation for Microsoft 365 related efforts. As a large portion of this role is client-facing, superior interpersonal communication and customer service skills are a must. The qualified individual will possess the ability to multi-task effectively while leading multi-thread project efforts and the aptitude to work both independently and collaboratively while generating a high-quality work product. While a majority of work can be performed remotely, occasional onsite visits to our clients located in Northeast Ohio may be required. Essential Functions Cloud Engineering 70% (client-facing & project delivery) Plan and execute client migrations to Microsoft 365 (Exchange Online, SharePoint, Teams, OneDrive) from on-prem and legacy environments Design and maintain end-to-end modern endpoint management, leveraging Windows Autopilot and Microsoft Intune for comprehensive MDM/MAM device configuration, compliance enforcement, and application lifecycle deployment across all endpoints Manage hybrid identities using EntraID, including provisioning and conditional access baseline setups Use migration tools such as BitTitan, AvePoint, and Azure Migrate Perform pre-migration assessments, including mailbox sizing, permissions audits, and DNS analysis Monitor migration projects, troubleshoot errors, and resolve escalation issues from cloud engineers Document migration runbooks, cutover plans, and post-migration validation steps Communicate with end users and clients during cutovers, providing clear status updates and instructions Perform MX record cutovers, complete DNS updates, and troubleshoot email routing configurations Lead post-migration tasks, including license assignment and policy application Handle complex long-term focused projects involving multiple disciplines and business units Standardize migration runbooks, cutover plans, and post-migration validations steps Serve as the final internal escalation point for the NOC team, taking escalation calls from on-call engineers outside of business hours as needed Mentor Cloud Services Engineers and the NOC team Evaluate, understand, and recommend cloud partner level requirements and certifications to leadership Consulting/Presales 30% Lead client-facing discovery sessions, scoping efforts, and technical architecture planning Design customized, cost-effective Microsoft Cloud and hybrid solutions aligned with client business goals Develop detailed Statements of Work, migrations plans, and project timelines Consult with clients on Microsoft licensing optimization Qualifications Education: Degree in Computer Science, Information Technology, or equivalent hands-on MSP experience Experience: 4+ years of experience dedicated to Azure IaaS, hybrid infrastructure setups, and the broader Microsoft Cloud stack Preferred certifications: MD-102, MS-900, AZ-104, AZ-305 Technical Proficiencies: Strong understanding of Windows Server, Exchange Online, Intune, Entra ID, Teams, SharePoint Online, DNS, and networking principles Soft Skills: Superior communication and customer service skills required for client-facing consultations and end-user support Environment Suitability: Prior MSP or IT consulting experience strongly preferred; proven ability to manage multiple concurrent projects autonomously Company Description Integrated IT Group is a comprehensive provider of managed, shared, and stand-alone services for clients throughout Northeast Ohio. These services include managed IT support, cloud solutions, cybersecurity, network solutions, IT consulting, mobile solutions, and disaster recovery for companies in commercial and public sector markets. Company Description Integrated IT Group is a comprehensive provider of managed, shared, and stand-alone services for clients throughout Northeast Ohio. These services include managed IT support, cloud solutions, cybersecurity, network solutions, IT consulting, mobile solutions, and disaster recovery for companies in commercial and public sector markets.
Job Description Job Description This role requires deep technical expertise in Microsoft 365/Azure combined with strong consulting skills to ensure our clients' infrastructure is secure, scalable, and fully optimized. The responsibilities include but are not limited to architecting and developing migration plans, creatively building solutions that are technically sound, performing engineering tasks for the delivery of solutions and migrations, developing documentation for the handoff to support, and serving as a point of escalation for Microsoft 365 related efforts. As a large portion of this role is client-facing, superior interpersonal communication and customer service skills are a must. The qualified individual will possess the ability to multi-task effectively while leading multi-thread project efforts and the aptitude to work both independently and collaboratively while generating a high-quality work product. While a majority of work can be performed remotely, occasional onsite visits to our clients located in Northeast Ohio may be required. Essential Functions Cloud Engineering 70% (client-facing & project delivery) Plan and execute client migrations to Microsoft 365 (Exchange Online, SharePoint, Teams, OneDrive) from on-prem and legacy environments Design and maintain end-to-end modern endpoint management, leveraging Windows Autopilot and Microsoft Intune for comprehensive MDM/MAM device configuration, compliance enforcement, and application lifecycle deployment across all endpoints Manage hybrid identities using EntraID, including provisioning and conditional access baseline setups Use migration tools such as BitTitan, AvePoint, and Azure Migrate Perform pre-migration assessments, including mailbox sizing, permissions audits, and DNS analysis Monitor migration projects, troubleshoot errors, and resolve escalation issues from cloud engineers Document migration runbooks, cutover plans, and post-migration validation steps Communicate with end users and clients during cutovers, providing clear status updates and instructions Perform MX record cutovers, complete DNS updates, and troubleshoot email routing configurations Lead post-migration tasks, including license assignment and policy application Handle complex long-term focused projects involving multiple disciplines and business units Standardize migration runbooks, cutover plans, and post-migration validations steps Serve as the final internal escalation point for the NOC team, taking escalation calls from on-call engineers outside of business hours as needed Mentor Cloud Services Engineers and the NOC team Evaluate, understand, and recommend cloud partner level requirements and certifications to leadership Consulting/Presales 30% Lead client-facing discovery sessions, scoping efforts, and technical architecture planning Design customized, cost-effective Microsoft Cloud and hybrid solutions aligned with client business goals Develop detailed Statements of Work, migrations plans, and project timelines Consult with clients on Microsoft licensing optimization Qualifications Education: Degree in Computer Science, Information Technology, or equivalent hands-on MSP experience Experience: 4+ years of experience dedicated to Azure IaaS, hybrid infrastructure setups, and the broader Microsoft Cloud stack Preferred certifications: MD-102, MS-900, AZ-104, AZ-305 Technical Proficiencies: Strong understanding of Windows Server, Exchange Online, Intune, Entra ID, Teams, SharePoint Online, DNS, and networking principles Soft Skills: Superior communication and customer service skills required for client-facing consultations and end-user support Environment Suitability: Prior MSP or IT consulting experience strongly preferred; proven ability to manage multiple concurrent projects autonomously Company Description Integrated IT Group is a comprehensive provider of managed, shared, and stand-alone services for clients throughout Northeast Ohio. These services include managed IT support, cloud solutions, cybersecurity, network solutions, IT consulting, mobile solutions, and disaster recovery for companies in commercial and public sector markets. Company Description Integrated IT Group is a comprehensive provider of managed, shared, and stand-alone services for clients throughout Northeast Ohio. These services include managed IT support, cloud solutions, cybersecurity, network solutions, IT consulting, mobile solutions, and disaster recovery for companies in commercial and public sector markets.
Ignite IT
Job Description Job Description We are seeking a Senior Network Security Engineer for an operations-first role supporting enterprise network security infrastructure across on-premises, remote-access, hybrid-cloud, and cloud-connected environments. This is not primarily an architecture/design role. The priority is a hands-on engineer who can administer, configure, maintain, troubleshoot, patch, upgrade, back up, validate, document, and operate production security platforms with minimal ramp-up. Firewall operations: hands-on Cisco and Palo Alto firewall administration, rule changes, NAT, troubleshooting, policy cleanup, upgrades, backups, logging, and production support. VPN / remote access: support for remote-access VPN, site-to-site VPN, user connectivity issues, certificates, authentication flows, and after-hours troubleshooting. RSA / MFA administration: RSA SecurID or equivalent MFA operations, token support, server administration, user troubleshooting, VPN integration, certificates, patching, backups, logs, and monitoring. Day-to-day operations: ticket resolution, monitoring alerts, health checks, change requests, incident support, maintenance windows, operational reporting, and customer support. Configuration and administration: installing, configuring, maintaining, patching, upgrading, backing up, validating, and troubleshooting assigned security platforms. Production troubleshooting: strong TCP/IP, DNS, routing, firewall logs, packet captures, VPN authentication, certificate, and connectivity troubleshooting. Documentation and process discipline: SOPs, runbooks, diagrams, change records, rollback plans, evidence collection, knowledge transfer, and formal change management. Federal/customer environment maturity: Public Trust eligibility, regulated-environment documentation, customer support, cross-team coordination, and comfort working with government stakeholders. The best candidate can credibly say: "I have operated enterprise Cisco and Palo Alto firewalls in production, handled firewall rule changes and troubleshooting, supported VPN users and site-to-site tunnels, administered or supported RSA/MFA tied to VPN access, followed formal change-management processes, maintained documentation and backups, and can step into daily operational support with minimal ramp-up." Scope and Role Boundaries Primary platforms include Cisco ASA/Firepower/FTD/FMC, Palo Alto NGFW/Panorama/GlobalProtect, remote-access and site-to-site VPN, RSA SecurID Authentication Manager or comparable MFA, monitoring/logging/SIEM integrations, and related network security controls. Coordinate with SOC/NOC, cloud, identity/directory, wireless/LAN, server, endpoint, system owner, application, governance, and vendor teams during changes, incidents, troubleshooting, compliance, and audit support. Cloudflare, Cisco ISE/NAC, secure web/email gateways, packet visibility tools, SD-WAN/SASE/ZTNA, AWS/Azure security, and F5/application-delivery awareness are useful where they intersect with assigned operational support, but the core need is firewall, VPN, RSA/MFA, and production operations. Key Responsibilities Provide daily, weekly, monthly, and annual operational support for assigned security systems, including tickets, alerts, health checks, email/phone support, metrics, status reporting, and operational validation. Administer and troubleshoot enterprise firewalls, including rule bases, NAT, segmentation, high availability, threat prevention, VPN integration, logging, secure baselines, rule reviews, recertification, cleanup, and decommissioning. Install, configure, maintain, patch, upgrade, back up, and validate firewall, VPN, MFA, and related network security systems in production environments. Support remote-access VPN, site-to-site VPN, partner connectivity, cloud connectivity, mobile/remote users, certificates, authentication policies, availability, utilization, and user access issues. Maintain and troubleshoot RSA SecurID Authentication Manager or equivalent MFA services, including servers/appliances, agents, certificates, HA, backups, logs, monitoring, directory integration, VPN authentication, and token lifecycle support. Respond to incidents, vulnerability notices, urgent requests, vendor advisories, PSIRT notices, system alerts, and emergency troubleshooting while minimizing service disruption. Use firewall logs, VPN logs, packet captures, SIEM data, monitoring tools, DNS/routing checks, and standard diagnostics to resolve complex connectivity, authentication, TLS/certificate, and application-flow issues. Create and maintain topology diagrams, equipment inventories, configurations, SOPs, runbooks, implementation plans, rollback plans, build/upgrade procedures, troubleshooting notes, and knowledge articles. Follow approved change, release, incident, problem, and configuration-management processes; prepare change records, peer-review materials, validation evidence, root-cause analysis, metrics, and audit artifacts. Support vulnerability remediation, POA&M tracking, continuous monitoring, compliance reviews, audit evidence collection, and coordination with ISSO, system owner, and security governance teams. Requirements 7+ years of experience in network security engineering, network infrastructure, cybersecurity infrastructure, or a closely related role. 5+ years of hands-on experience administering, maintaining, and troubleshooting enterprise firewall platforms in production environments. Hands-on experience with Cisco security technologies such as Cisco ASA, Firepower, FTD, FMC, AnyConnect/Secure Client, or equivalent Cisco firewall/VPN platforms. Hands-on experience with Palo Alto Networks technologies such as NGFW, Panorama, GlobalProtect, security profiles, App-ID/User-ID, logging, and policy optimization. Experience administering or supporting RSA SecurID Authentication Manager or comparable enterprise MFA/two-factor authentication platforms, including token support, server operations, patching/upgrades, backups, certificates, monitoring, and directory/VPN integration. Strong knowledge of firewall policy, NAT, VPNs, routing, DNS, DHCP, BGP, TLS/certificates, packet captures, log analysis, segmentation, high availability, and common network diagnostic tools. Experience with enterprise monitoring, logging, SIEM, alerting, vulnerability management, incident response, formal change management, and regulated-environment documentation. Ability to create clear technical documentation, support customers and stakeholders, prioritize operational work, communicate clearly, and coordinate across technical teams. Ability to obtain and maintain a Public Trust background investigation. Desired Certifications Relevant certifications are helpful but should not replace demonstrated hands-on experience. Examples include CCNP Security, CCIE Security, PCNSE, PCCSE, CISSP, CCSP, AWS Certified Security - Specialty, AWS Advanced Networking - Specialty, Microsoft Certified: Azure Security Engineer Associate, Microsoft Certified: Azure Network Engineer Associate, CompTIA Security+, CompTIA CySA+, GIAC certifications, or equivalent vendor/cloud certifications. Core Competencies Enterprise firewall engineering and policy lifecycle management VPN, remote access, RSA/MFA, and token lifecycle operations Cloudflare, edge security, secure access, and Zero Trust support Content filtering, secure web/email gateway, and NAC operations Hybrid-cloud network security and secure connectivity Monitoring, logging, SIEM integration, and incident response support Security visibility, packet analysis, and advanced troubleshooting Vulnerability remediation, compliance evidence, and POA&M support Change management, documentation, reporting, and operational metrics Technical leadership, customer support, and cross-team collaboration Benefits 401(k) 401(k) matching Dental insurance Flexible schedule Flexible spending account Health insurance Health savings account Life insurance Paid time off Professional development assistance Referral program Retirement plan Tuition reimbursement Vision insurance
Job Description Job Description We are seeking a Senior Network Security Engineer for an operations-first role supporting enterprise network security infrastructure across on-premises, remote-access, hybrid-cloud, and cloud-connected environments. This is not primarily an architecture/design role. The priority is a hands-on engineer who can administer, configure, maintain, troubleshoot, patch, upgrade, back up, validate, document, and operate production security platforms with minimal ramp-up. Firewall operations: hands-on Cisco and Palo Alto firewall administration, rule changes, NAT, troubleshooting, policy cleanup, upgrades, backups, logging, and production support. VPN / remote access: support for remote-access VPN, site-to-site VPN, user connectivity issues, certificates, authentication flows, and after-hours troubleshooting. RSA / MFA administration: RSA SecurID or equivalent MFA operations, token support, server administration, user troubleshooting, VPN integration, certificates, patching, backups, logs, and monitoring. Day-to-day operations: ticket resolution, monitoring alerts, health checks, change requests, incident support, maintenance windows, operational reporting, and customer support. Configuration and administration: installing, configuring, maintaining, patching, upgrading, backing up, validating, and troubleshooting assigned security platforms. Production troubleshooting: strong TCP/IP, DNS, routing, firewall logs, packet captures, VPN authentication, certificate, and connectivity troubleshooting. Documentation and process discipline: SOPs, runbooks, diagrams, change records, rollback plans, evidence collection, knowledge transfer, and formal change management. Federal/customer environment maturity: Public Trust eligibility, regulated-environment documentation, customer support, cross-team coordination, and comfort working with government stakeholders. The best candidate can credibly say: "I have operated enterprise Cisco and Palo Alto firewalls in production, handled firewall rule changes and troubleshooting, supported VPN users and site-to-site tunnels, administered or supported RSA/MFA tied to VPN access, followed formal change-management processes, maintained documentation and backups, and can step into daily operational support with minimal ramp-up." Scope and Role Boundaries Primary platforms include Cisco ASA/Firepower/FTD/FMC, Palo Alto NGFW/Panorama/GlobalProtect, remote-access and site-to-site VPN, RSA SecurID Authentication Manager or comparable MFA, monitoring/logging/SIEM integrations, and related network security controls. Coordinate with SOC/NOC, cloud, identity/directory, wireless/LAN, server, endpoint, system owner, application, governance, and vendor teams during changes, incidents, troubleshooting, compliance, and audit support. Cloudflare, Cisco ISE/NAC, secure web/email gateways, packet visibility tools, SD-WAN/SASE/ZTNA, AWS/Azure security, and F5/application-delivery awareness are useful where they intersect with assigned operational support, but the core need is firewall, VPN, RSA/MFA, and production operations. Key Responsibilities Provide daily, weekly, monthly, and annual operational support for assigned security systems, including tickets, alerts, health checks, email/phone support, metrics, status reporting, and operational validation. Administer and troubleshoot enterprise firewalls, including rule bases, NAT, segmentation, high availability, threat prevention, VPN integration, logging, secure baselines, rule reviews, recertification, cleanup, and decommissioning. Install, configure, maintain, patch, upgrade, back up, and validate firewall, VPN, MFA, and related network security systems in production environments. Support remote-access VPN, site-to-site VPN, partner connectivity, cloud connectivity, mobile/remote users, certificates, authentication policies, availability, utilization, and user access issues. Maintain and troubleshoot RSA SecurID Authentication Manager or equivalent MFA services, including servers/appliances, agents, certificates, HA, backups, logs, monitoring, directory integration, VPN authentication, and token lifecycle support. Respond to incidents, vulnerability notices, urgent requests, vendor advisories, PSIRT notices, system alerts, and emergency troubleshooting while minimizing service disruption. Use firewall logs, VPN logs, packet captures, SIEM data, monitoring tools, DNS/routing checks, and standard diagnostics to resolve complex connectivity, authentication, TLS/certificate, and application-flow issues. Create and maintain topology diagrams, equipment inventories, configurations, SOPs, runbooks, implementation plans, rollback plans, build/upgrade procedures, troubleshooting notes, and knowledge articles. Follow approved change, release, incident, problem, and configuration-management processes; prepare change records, peer-review materials, validation evidence, root-cause analysis, metrics, and audit artifacts. Support vulnerability remediation, POA&M tracking, continuous monitoring, compliance reviews, audit evidence collection, and coordination with ISSO, system owner, and security governance teams. Requirements 7+ years of experience in network security engineering, network infrastructure, cybersecurity infrastructure, or a closely related role. 5+ years of hands-on experience administering, maintaining, and troubleshooting enterprise firewall platforms in production environments. Hands-on experience with Cisco security technologies such as Cisco ASA, Firepower, FTD, FMC, AnyConnect/Secure Client, or equivalent Cisco firewall/VPN platforms. Hands-on experience with Palo Alto Networks technologies such as NGFW, Panorama, GlobalProtect, security profiles, App-ID/User-ID, logging, and policy optimization. Experience administering or supporting RSA SecurID Authentication Manager or comparable enterprise MFA/two-factor authentication platforms, including token support, server operations, patching/upgrades, backups, certificates, monitoring, and directory/VPN integration. Strong knowledge of firewall policy, NAT, VPNs, routing, DNS, DHCP, BGP, TLS/certificates, packet captures, log analysis, segmentation, high availability, and common network diagnostic tools. Experience with enterprise monitoring, logging, SIEM, alerting, vulnerability management, incident response, formal change management, and regulated-environment documentation. Ability to create clear technical documentation, support customers and stakeholders, prioritize operational work, communicate clearly, and coordinate across technical teams. Ability to obtain and maintain a Public Trust background investigation. Desired Certifications Relevant certifications are helpful but should not replace demonstrated hands-on experience. Examples include CCNP Security, CCIE Security, PCNSE, PCCSE, CISSP, CCSP, AWS Certified Security - Specialty, AWS Advanced Networking - Specialty, Microsoft Certified: Azure Security Engineer Associate, Microsoft Certified: Azure Network Engineer Associate, CompTIA Security+, CompTIA CySA+, GIAC certifications, or equivalent vendor/cloud certifications. Core Competencies Enterprise firewall engineering and policy lifecycle management VPN, remote access, RSA/MFA, and token lifecycle operations Cloudflare, edge security, secure access, and Zero Trust support Content filtering, secure web/email gateway, and NAC operations Hybrid-cloud network security and secure connectivity Monitoring, logging, SIEM integration, and incident response support Security visibility, packet analysis, and advanced troubleshooting Vulnerability remediation, compliance evidence, and POA&M support Change management, documentation, reporting, and operational metrics Technical leadership, customer support, and cross-team collaboration Benefits 401(k) 401(k) matching Dental insurance Flexible schedule Flexible spending account Health insurance Health savings account Life insurance Paid time off Professional development assistance Referral program Retirement plan Tuition reimbursement Vision insurance